TRACING-4630 |RHOSDT 3.6 | Tempo query RBAC

[pavolloffay]

Version(s):

OCP 4.12-4.19
RHOSDT: 3.6

Issue:

https://issues.redhat.com/browse/TRACING-4630

Link to docs preview:

QE review:

• QE has approved this change.

Additional information:

TODO:

• Document which minimal RBAC is needed and test it

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[pavolloffay]

/test all

[andreasgerstmayr]

Suggested change

subjects:

line is twice in the example

[andreasgerstmayr]

For the example, I think giving access to all authenticated users is too broad access, I'd suggest e.g.

oc adm policy add-role-to-user view alice -n tutorial-application-backend2

(using alice from the example here: https://docs.openshift.com/container-platform/4.18/authentication/using-rbac.html#adding-roles_using-rbac)

[max-cx]

Pavol, feel free to close this PR because I opened #93417.

[openshift-merge-robot]

PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.